Our Responsible Disclosure Policy

At the end of 2011, Engine Yard conducted a detailed security audit against our Engine Yard Cloud and Orchestra platforms. While the investment was significant, we realize the importance and value that regular security testing brings. With that said, we also value the community’s input into our security posture. With that in mind, and following the lead of our friends at GitHub, we released a similar “Responsible Disclosure Policy” that outlines our commitment to you when you take the time to responsibly test and disclose security vulnerabilities to us.